$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: aEeaCe94U88JqKHOapeU2vPbFGUX8+2j0QTqzq97mIQ= Subject key identifier: C6:C4:80:91:6E:F2:0B:F0:C0:3A:36:FA:E5:7B:69:1D:2B:E3:3F:74 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 06EE Signing time: Fri 08 Aug 2025 22:23:32 +0000 Manifest this update: Fri 08 Aug 2025 22:23:31 +0000 Manifest next update: Fri 15 Aug 2025 22:23:31 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: K1j48WwsCSkvgceabVNGJcGJRg4ITpe1220wssNqvHA=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Aug 8 22:23:31 2025 GMT Not After : Aug 15 22:23:31 2025 GMT Subject: CN=689678e4-6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:36:c1:16:80:6a:eb:9e:56:e0:a5:81:00: 56:0b:bd:6f:4f:47:93:bd:33:dd:03:04:21:a2:26: 93:c9:02:47:59:a0:b1:69:02:a0:f3:5f:c0:7a:04: eb:ba:c4:ec:cd:f9:97:cc:91:d3:2c:79:56:0a:dd: 99:67:e9:f7:3b:77:bb:53:01:49:90:a1:33:ce:2e: 92:a2:a3:47:49:8b:dc:69:67:1f:31:6a:06:ef:75: 74:b6:ee:06:9e:9f:3b:36:db:72:73:1c:b8:df:0d: c0:1f:48:03:6b:85:2b:c1:a0:3d:ac:94:f6:fd:6e: fc:79:5a:9b:7f:bd:4a:2d:c4:65:b1:80:83:06:7f: 6d:9e:da:a3:f0:e1:36:65:43:a2:36:be:ac:14:16: e7:4b:48:03:a2:7c:f4:b1:0a:9a:f7:2d:ac:b3:51: 59:7b:5f:c8:4e:33:b0:34:2c:25:0b:5e:ca:a2:92: 5d:d9:69:54:b3:28:05:f5:c2:b9:27:13:28:32:03: ef:61:f2:0a:e5:d3:bf:11:7a:92:ca:c9:43:51:ee: 51:56:52:13:c7:64:ee:4d:7e:7e:19:aa:89:b5:d9: d2:59:8b:34:72:c3:af:c9:82:27:71:ed:73:0d:53: 7f:b7:26:31:02:31:0b:e4:fb:70:2c:aa:05:21:51: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C4:80:91:6E:F2:0B:F0:C0:3A:36:FA:E5:7B:69:1D:2B:E3:3F:74 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:43:76:59:b1:2c:16:fe:28:da:f4:4b:e0:1a:b8:d9:13:0d: fc:51:ce:2b:d4:ec:2c:ab:97:23:b2:43:0e:da:a2:67:22:c5: 4f:67:d0:4c:79:59:2a:7d:03:f4:1a:35:b3:4e:92:72:e9:22: 8b:c2:4b:1c:cc:d8:a2:18:99:64:8c:84:9f:9f:cf:0b:92:f8: 2c:ee:4b:dc:13:43:c1:61:81:95:d9:60:e2:2b:83:b4:ce:df: 25:42:06:08:96:6f:39:bf:05:33:b8:b3:03:26:3d:be:39:c0: 3d:59:a3:60:37:d7:cf:b4:60:33:92:fd:93:60:cc:b3:3f:2f: 93:71:49:f1:4a:00:2a:fd:de:00:01:d8:e0:ac:8a:94:6f:59: f3:b0:1e:4b:7e:08:b8:18:00:5e:e0:b5:75:39:a7:ca:ea:a4: 7e:4d:1e:be:36:e5:ca:ac:58:9c:e5:51:04:3c:6a:73:91:8e: c8:3c:d7:c0:91:eb:90:56:ff:3d:04:e8:e5:0d:69:fa:78:1f: ab:1c:70:00:83:4e:82:b7:04:12:ab:13:87:f5:0c:db:04:e3: 5d:84:a8:e3:e7:78:f1:88:8c:b3:6c:de:ba:2b:8e:a2:f7:1c: 42:b9:2d:56:1c:c8:07:d8:ac:0c:2b:23:3c:c4:b8:f7:29:2c: 7c:48:1a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjUwODA4MjIyMzMxWhcNMjUwODE1MjIyMzMxWjAYMRYwFAYD VQQDEw02ODk2NzhlNC02ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAo2wRaAauueVuClgQBWC71vT0eTvTPdAwQhoiaTyQJHWaCxaQKg81/AegTr usTszfmXzJHTLHlWCt2ZZ+n3O3e7UwFJkKEzzi6SoqNHSYvcaWcfMWoG73V0tu4G np87Nttycxy43w3AH0gDa4UrwaA9rJT2/W78eVqbf71KLcRlsYCDBn9tntqj8OE2 ZUOiNr6sFBbnS0gDonz0sQqa9y2ss1FZe1/ITjOwNCwlC17KopJd2WlUsygF9cK5 JxMoMgPvYfIK5dO/EXqSyslDUe5RVlITx2TuTX5+GaqJtdnSWYs0csOvyYInce1z DVN/tyYxAjEL5PtwLKoFIVH0pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbEgJFu 8gvwwDo2+uV7aR0r4z90MB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZQ3ZZsSwW/ija9EvgGrjZEw38Uc4r1Owsq5cjskMO2qJnIsVPZ9BM eVkqfQP0GjWzTpJy6SKLwksczNiiGJlkjISfn88Lkvgs7kvcE0PBYYGV2WDiK4O0 zt8lQgYIlm85vwUzuLMDJj2+OcA9WaNgN9fPtGAzkv2TYMyzPy+TcUnxSgAq/d4A AdjgrIqUb1nzsB5Lfgi4GABe4LV1OafK6qR+TR6+NuXKrFic5VEEPGpzkY7IPNfA keuQVv89BOjlDWn6eB+rHHAAg06CtwQSqxOH9QzbBONdhKjj53jxiIyzbN66K46i 9xxCuS1WHMgH2KwMKyM8xLj3KSx8SBq1 -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:53 2025 by rpki-client